id: zoho-webhook-token

info:
  name: Zoho Webhook Disclosure
  author: Ice3man
  severity: info
  metadata:
    max-request: 1
  tags: exposure,token,zoho

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'https://creator\.zoho\.com/api/[A-Za-z0-9/\-_\.]+\?authtoken=[A-Za-z0-9]+'

# digest: 490a0046304402201d16cd7598f919216af5d3a94ecfedadac3e055ca4d65d33633b8652af5f26da022008cbf1ad2c43b7dbb7af3a2f3ca2854ff3c959d40c26edad703203eda40e5b6c:922c64590222798bb761d5b6d8e72950